Re:Six Dumbest Ideas in Computer Security
by userbinator on Sunday July 14, 2024 @04:01PM
(#40962863)
Vary the password per site based on your own algorithm.
[ Parent
| on HN ]
Re:Six Dumbest Ideas in Computer Security
by jay_kyburz on Sunday July 14, 2024 @05:04PM
(#40963205)
AKA, put the name of the site in the password :)
Re:Six Dumbest Ideas in Computer Security
by userbinator on Sunday July 14, 2024 @05:44PM
(#40963418)
Not necessarily, but just a pattern that only you would likely remember.
You need a pattern that only you recognise/understand, not just remember. It takes only one leak of your password from service FooBar that looks like "f....b" to know what to try on other sites. Patterns easy to remember are mostly easy to understand.
With LLM that sort of approach can be attacked at scale
Re:Six Dumbest Ideas in Computer Security
by Sohcahtoa82 on Monday July 15, 2024 @02:03PM
(#40970061)
"MyPasswordIsSecureDespiteNotBeingComplexBecauseItIsLong_BobsForum" is great until Bob's Forum gets hacked and it turns out that they were storing your password in plain text and your password of "MyPasswordIsSecureDespiteNotBeingComplexBecauseItIsLong_Google" becomes easily guessed.
Re:Six Dumbest Ideas in Computer Security
by zzo38computer on Monday July 15, 2024 @02:04PM
(#40970066)
One way to mitigate such a problem is to use the hash of this text as the password, instead of using the text directly.